Static task
static1
Behavioral task
behavioral1
Sample
ef084ef3d035753b5b7f9a985a01c0f2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef084ef3d035753b5b7f9a985a01c0f2_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ef084ef3d035753b5b7f9a985a01c0f2_JaffaCakes118
-
Size
2.5MB
-
MD5
ef084ef3d035753b5b7f9a985a01c0f2
-
SHA1
8052ad5dc80bad9d1b89726c3d1f9c7dde48e3b3
-
SHA256
4462464e21ee4f4d89d2efb153846f8f396ac4dec2667a44c0518132a3535f08
-
SHA512
1308e0f353d9bf5ae8a4486c6b5fdf7d3bb4494ae755defb1915c09634624af121c43e318875100050c1cb8d8355a6a37fad8d2b020c5a8ea36d842e89a0db4e
-
SSDEEP
49152:SnKqGv7QUg8u8FYRK9JyggjNAty6TOcwFrf7GiwAcLNg/SNh:SicUgEKRK9JyfetTdpzzNASNh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef084ef3d035753b5b7f9a985a01c0f2_JaffaCakes118
Files
-
ef084ef3d035753b5b7f9a985a01c0f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
SkyTeam Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BlurCode Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE